1
$\begingroup$

EdDSA, Edwards-curve Digital Signature Algorithm (EdDSA) is a digital signature scheme using a variant of Schnorr signature based on Twisted Edwards curves (source).

Schnorr signatures have a remarkable propert: linearity. This allows multiple parties can collaborate to produce a signature that is valid for the sum of their public keys.

  1. Does EdDSA provides same security guarantees for when aggregating signatures or deriving a new signatures?
  2. Can we apply same Blind Signature schema of Schnorr for EdDSA?
  3. If yes, what are the secure EdDSA aggregation constructions?

I found the following constructions for EdDSA, but I'm not sure if they were analysed enough:

| improve this question | | | | |
$\endgroup$

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.